Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2624▼ 224 respecto a la semana anterior
Críticas / altas1373▲ 143 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.3) | 0.70% | — | Tinycontrol LAN Controller Firmware | 30/12/2025 | 24/9/2026 | Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request. Attackers can exploit the /stm.cgi endpoint with a specially crafted authentication parameter to disable access controls and modify… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco 5520 Wireless LAN Controller FirmwareCisco 5508 Wireless LAN Controller Firmware | 16/10/2019 | 17/6/2026 | A vulnerability in the Secure Shell (SSH) session management for Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the SSH process is not properly deleted when an SSH… | |
| Modificada | Alta (7.5) | 3.2% | — | Cisco Wireless LAN Controller Firmware | 6/4/2017 | 17/6/2026 | A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a missing internal handler for the specific request. An attacker could exploit… | |
| Modificada | Alta (7.5) | 3.0% | — | Cisco Wireless LAN Controller FirmwareCisco Wireless LAN Controller Software | 6/4/2017 | 17/6/2026 | A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation. An attacker could exploit this vulnerability by sending… | |
| Modificada | Alta (8.8) | 1.4% | — | Cisco Wireless LAN Controller FirmwareCisco Wireless LAN Controller Software | 15/3/2017 | 17/6/2026 | A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology. The vulnerability is due to insufficient authentication of the parent access point in a mesh configuration. An attacker could exploit this… |